Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KddmuArUzMIP5deHFSnCT7Kt8jM.roa
File: KddmuArUzMIP5deHFSnCT7Kt8jM.roa (raw, json)
Hash identifier: hpPbBDL1mtw3txsqhtTuQmfvDy2E1ibNY9tB/anjtag=
Subject key identifier: 29:D7:66:B8:0A:D4:CC:C2:0F:E5:D7:87:15:29:C2:4F:B2:AD:F2:33
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA9FAD73228171FE9CBE1CCDF1A807
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KddmuArUzMIP5deHFSnCT7Kt8jM.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212510
IP address blocks: 2a0c:b641:2c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9f:ad:73:22:81:71:fe:9c:be:1c:cd:f1:a8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29d766b80ad4ccc20fe5d7871529c24fb2adf233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:cb:41:c0:9f:96:c5:27:78:44:de:c7:6c:
c8:9c:08:7e:8e:f6:11:d7:9d:6e:b4:89:ae:c2:87:
12:45:88:df:a3:9b:c5:da:09:9b:84:b7:01:a0:b9:
41:e3:90:00:9b:ca:76:92:87:4f:eb:34:b3:bb:fc:
38:9a:ea:bf:dd:bf:4f:f2:d6:e9:25:2e:85:47:5e:
83:4c:95:f7:82:35:57:23:94:6e:25:41:8c:1b:be:
c7:51:80:09:3f:0b:02:8e:90:9c:e1:ed:ea:43:d2:
21:0c:db:02:64:92:71:ee:d5:24:fe:99:ba:d1:89:
88:4f:13:1b:e5:f0:d2:9b:66:71:20:e2:bd:37:37:
39:85:2e:a5:d5:a9:96:81:d8:4e:a4:e2:aa:7f:90:
ac:0e:a6:bb:7d:bb:2a:e9:c7:3a:6e:f1:d2:5f:9f:
a4:d6:9e:55:68:0d:d0:ef:ec:10:22:ff:a2:08:e2:
fc:a5:6e:9d:a9:02:a8:ea:5f:ea:d4:f0:dc:8f:27:
09:5d:60:04:3a:39:82:66:d6:94:fb:53:6f:5e:f1:
32:db:2d:c9:0a:c0:76:c9:80:e3:88:57:1f:70:5d:
63:09:2b:7a:62:24:c3:71:bc:6a:8b:87:70:ed:32:
44:01:62:d9:45:e5:25:b7:3e:79:dc:71:1b:ed:6b:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:66:B8:0A:D4:CC:C2:0F:E5:D7:87:15:29:C2:4F:B2:AD:F2:33
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KddmuArUzMIP5deHFSnCT7Kt8jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
87:f0:95:15:f0:4f:cb:3a:e6:68:6a:5a:be:66:22:4d:52:91:
96:66:10:13:6d:a8:5c:e3:09:f7:40:f9:41:a5:a6:e2:7e:ad:
a3:8c:18:41:c2:5d:39:a2:3a:04:98:98:70:a9:a4:7e:cf:30:
81:3d:8b:e5:6d:a8:4d:49:6e:35:bb:23:35:5a:bd:fc:e6:63:
93:8f:91:53:5a:85:ae:0e:f9:98:23:52:a6:9e:99:23:d0:a8:
bd:8e:68:12:ee:8e:d3:35:72:ef:35:98:e7:dd:e9:13:48:52:
d3:69:d2:ca:a5:dd:02:fa:0d:5c:c1:e0:15:27:70:1f:18:df:
4e:2a:ef:0c:cc:aa:8d:70:56:95:f6:84:b8:34:06:91:ee:f2:
e3:50:28:1f:8a:5f:e3:56:c0:54:e8:3f:f3:69:fb:74:47:cc:
09:2f:9e:01:19:7d:d9:32:bd:dc:ec:f1:98:c3:35:69:79:81:
f0:5e:50:e5:79:37:9e:50:01:fa:a2:52:70:ea:a1:04:1e:2a:
e1:9f:c7:38:00:00:af:e2:c9:2b:2a:5e:67:2a:d8:c1:a8:e2:
7d:bc:0d:e5:c4:4b:10:41:9b:47:90:9b:b9:aa:e9:15:2c:8f:
65:d5:e9:4c:56:ca:69:30:a3:26:ba:97:a2:1e:82:7c:0c:15:
22:66:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:33 2025 by rpki-client